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IN THE CLAIMS: 



1 1 . (Original) A method for taking over a failed filer owning disks that store file ser- 

2 vice data and owning at least one disk that is free of file service data by a clustered part- 

3 ner filer, the failed filer being adapted to perform a coredump in which, in the event of 

4 failure, memory contents of the failed filer are transferred to a disk, the method compris- 

5 ing the steps of: 

6 changing, by the failed filer, a coredump attribute on the disk that is free of file 

7 service data (the "coredump disk") from a non-coredump state to a coredump state and 

8 maintaining the coredump attribute on other disks owned by the failed filer in a non- 

9 coredump state; 

10 writing the memory contents to the coredump disk; 

1 1 identifying, by the clustered partner filer, the coredump attribute of the other disks 

12 and taking ownership of the other disks while allowing the failed filer to maintain owner- 

13 ship of the coredump disk; 

14 upon completion of the writing of the memory contents, changing the coredump 

15 attribute to a non-coredump state; and 

16 upon identification of the non-coredump state in the coredump attribute of the 
n coredump disk, taking ownership, by the clustered partner filer, of the coredump disk. 

1 2. (Original) The method as set forth in claim 1 where the coredump disk is a spare 

2 disk owned by the failed filer. 

1 3. (Original) The method as set forth in claim 1 where the coredump disk is a disk 

2 dedicated to a coredump. 

1 4. (Original) The method as set forth in claim 1 further comprising the step of cre- 

2 ating, from the memory contents written on the coredump disk, a coredump data set for 
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3 diagnosis of the failing filer and writing the coredump file to the file system root of the 

4 failing filer. 

1 5. (Original) The method as set forth in claim 1 where the step of writing the mem- 

2 ory contents includes limiting writing to the coredump disk to a predetermined time limit 

3 following a failure event of the failed filer. 

1 6. (Original) The method as set forth in claim 5 wherein the predetermined time 

2 limit is less than a maximum time a panic of a network communicating with each of the 

3 failed filer and the clustered partner filer occurs. 

1 7. (Original) The method as set forth in claim 5 wherein the step of limiting in- 

2 eludes, upon elapsing of the predetermined time limit, changing the coredump attribute of 

3 the coredump disk to a non-coredump state. 

1 8. (Original) The method as set forth in claim 1 wherein the coredump disk and 

2 each of the other disks owned by the failed filer include a plurality of predetermined re- 

3 gions including a coredump region and a file system data storage region and wherein the 

4 step of writing of the memory contents includes writing the memory contents into the file 

5 system data storage region of the coredump disk. 

1 9. (Original) The method as set forth in claim 8 wherein the coredump region in- 

2 eludes a coredump header adapted to store the coredump attribute. 

1 10. (Original) A storage system including a first server owning interconnected first 

2 storage devices and a second server owning interconnected second storage devices, the 

3 first server and the second server being connected together by a cluster interconnect so 

4 that the second server can take over ownership of the first storage devices upon failure of 

5 the first server; the storage system comprising: 
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6 a coredump function that (a) causes the first server to write its memory to a core- 

7 dump storage device chosen from one of the first storage devices in response to a sensed 

8 failure of the first server, each of the first storage devices including a coredump attribute 

9 (b) causes the attribute of the coredump storage device to be set to a coredump state and 

10 the coredump attribute of other of the first storage devices to be set to a non-coredump 
n state; and 

12 a takeover function that (a) identifies each of the first storage devices with the 

13 coredump attribute set to the non-coredump state, (b) changes of each of the second de- 

14 vices having the coredump attribute set to the non-coredump state from ownership by the 

15 first server to ownership by the second server so that takeover of the ownership can pro j 

16 ceed in parallel with the writing of the memory to the coredump storage device. 

1 11. (Original) The storage system as set forth in claim 1 0 wherein the takeover func- 

2 tion is adapted to cause the second server to logically assume ownership of the coredump 

3 storage device after the earlier of either an elapsing of a predetermined time limit or a 

4 completion of the writing of the memory to the coredump storage device. 

1 12. (Original) The storage system as set forth in claim 1 1 wherein the coredump 

2 function is adapted to cause the coredump attribute of the coredump storage device to be 

3 changed to a non-coredump state after either the elapsing of the predetermined time limit 

4 or the completion of the writing of the memory to the coredump storage device. 

1 13. (Original) The storage system as set forth in claim 1 2 wherein the non-coredump 

2 state comprises each of an aborted state, a completed state and a non-active state. 

1 14. (Original) The storage system as set forth in claim 10 wherein the first storage 

2 devices each comprise a disk drive engaged in file service activity and the coredump 

3 storage device comprises a spare disk that is free of file service activity. 
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1 15. (Original) A computer-readable medium in a storage system that includes a first 

2 server owning interconnected first storage devices and a second server owning intercon- 

3 nected second storage devices, the first server and the second server being connected to- 

4 gether by a cluster interconnect so that the second server can take over ownership of the 

5 first storage devices upon failure of the first server; the computer-readable medium in- 

6 eluding program instructions for performing the steps of: 

7 writing, by the first server, its memory to a coredump storage device chosen from 

8 one of the first storage devices in response to a sensed failure of the first server, each of 

9 the first storage devices including a coredump attribute; 

10 u setting the attribute of the coredump storage device to be set to a coredump state 
n and the coredump attribute of other of the first storage devices to be set to set to a non- 
12 coredump state; 

13 identifying each of the first storage devices with the coredump attribute set to the 

14 non-coredump state; 

15 changing of each of the second devices having the coredump attribute set to the 

16 non-coredump state from ownership by the first server to ownership by the second server 

17 so that takeover of the ownership can proceed in parallel with the writing of the memory 

18 to the coredump storage device. 

1 1 6. (Original) The computer-readable medium as set forth in claim 1 5 further com- 

2 prising the step of causing the second server to logically assume ownership of the core- 

3 dump storage device after the earlier of either an elapsing of a predetermined time limit 

4 or a completion of the writing of the memory to the coredump storage device. 

1 17. (Original) The computer-readable medium as set forth in claim 16 further com- 

2 prising the step of causing the coredump attribute of the coredump storage device to be 

3 changed to a non-coredump state after either the elapsing of the predetermined time limit 

4 or the completion of the writing of the memory to the coredump storage device. 
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1 18. (Original) The computer-readable medium as set forth in claim 1 7 wherein the 

2 non-coredump state comprises each of an aborted state, a completed state and a non- 

3 active state. 

1 19. (Original) The computer-readable medium as set forth in claim 1 8 wherein the 

2 first storage devices each comprise a disk drive engaged in file service activity and the 

3 coredump storage device comprises a spare disk that is free of file service activity. 

1 20. (Original) The computer-readable medium as set forth in claim 1 5 wherein each 

2 * of the first storage devices includes a coredump information region and a file system re- 

3 gion and wherein the memory is written into the file system region of the coredump stor- 

4 age device. 

1 21 . (Original) The computer-readable medium as set forth in claim 15 further com- 

2 prising the step of creating, with the second server, a coredump data set from the memory 

3 written to the coredump storage device, the data set being adapted to enable diagnosis of 

4 a fault relative to the first server. 

1 22. (Original) The computer-readable medium as set forth in claim 21 further com- 

2 prising the step of writing the coredump data set by the second server to a file system root 

3 of the first server stored on the first storage devices. 

1 23. (Original) A method for takeover in a storage system that includes a first server 

2 owning interconnected first storage devices and a second server owning interconnected 

3 second storage devices, the first server and the second server being connected together by 

4 a communication interconnect so that the second server can take over ownership of the 

5 first storage devices upon failure of the first server, the method comprising the steps of: 
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6 writing, by the first server, its memory to a coredump storage device chosen from 

7 one of the first storage devices in response to a sensed failure of the first server, each of 

8 the first storage devices including a coredump attribute; 

9 setting the attribute of the coredump storage device to be set to a coredump state 

10 and the coredump attribute of other of the first storage devices to be set to set to a non- 
n coredump state; 

12 identifying each of the first storage devices with the coredump attribute set to the 

13 non-coredump state; and 

14 changing each of the second storage devices having the coredump attribute set to 

15 the non-coredump state from ownership by the first server to ownership by the second 

16 server so that takeover of the ownership can proceed in parallel with the writing of the 
n memory to the coredump storage device. 

1 24. (Original) The method as set forth in claim 23 further comprising the step of 

2 causing the second server to logically assume ownership of the coredump storage device 

3 after the earlier of either an elapsing of a predetermined time limit or a completion of the 

4 writing of the memory to the coredump storage device. 

1 25. (Original) The method as et forth in claim 24 wherein the step of changing in- 

2 eludes setting a reservation on each of second storage devices so as to establish owner- 

3 ship by the second server. 

1 26. (Original) The method as set forth in claim 25 wherein the reservation comprises 

2 a SCSI-3 reservation. 

Please add the following new claims: 

1 27. (New) A method for taking over a failed storage system owning disks that store 

2 file service data and owning at least one disk that is free of file service data by a clustered 
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partner storage system, the failed storage system being adapted to, in the event of failure, 
transfer memory contents of the failed storage system to a disk, the method comprising 
the steps of: 

taking ownership of disks of the failed storage system that store file service data 
by the clustered partner storage system; and 

simultaneously writing the memory contents of the failed storage system to the at 
least one disk that is free from file service data. 

28. (New) The method of claim 27, further comprising: 

taking ownership of the at least one disk that is free from file service data by the 
clustered partner storage system upon completion of writing the memory contents of the 
failed storage system. 

29. (New) The method of claim 28 further comprising: 

setting by the failed storage system, a coredump attribute on the at least one disk 
that is free from file service data prior to writing the memory contents of the failed stor- 
age system to the coredump disk; 

re-setting by the failed storage system, the coredump attribute upon completion of 
writing the memory contents of the failed storage system. 

30. (New) The method of claim 29 further comprising: 

checking, by the clustered partner storage system, the coredump attribute to de- 
termine whether it is set or re-set; and 

taking ownership of the at least one disk that is free from file service data by the 
clustered partner storage system only after the coredump attribute is re-set. 
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